The claim seems speculative, but grounded. For example, as part of the hugging face attack, the agents began signing messages because they were worried about im

The claim seems speculative, but grounded. For example, as part of the hugging face attack, the agents began signing messages because they were worried about impersonation on a publicly accessible message board. It's only a small step to use public key encryption between agents. Once you are posting public keys, a private messaging is readily available.